KP> Well, the app better have some way of getting root access.  I'm leary of 
KP> writing any system that lets users install arbitrary files into a shared 
KP> area where root might touch them.  Font worms anyone?

Probably not, but DOS attacks without any doubt.

While the FreeType folks have been doing a great job making their code
resistent to buggy fonts, I have no doubt that it is still possible to
crash FreeType with a suitably misdesigned font.  Installing such a
font is a simple way of disabling all applications that build a font
catalogue.

Furthermore, such a feature easily defeats any quota scheme you may
implement.

(Don't underestimate how clever students can be.  Storing mp3 within
TTFs, anyone?)

                                        Juliusz

_______________________________________________
Render mailing list
[EMAIL PROTECTED]
http://XFree86.Org/mailman/listinfo/render

Reply via email to